GB
Product
Github Branch Source
8
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 8Low 0
Watch
Add Github Branch Source to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23901 | 6.5 | Jan 24 | Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to… Affected: through 684.vea_fa_7c1e2fe3 |
| CVE-2017-1000091 | 6.3 | Oct 5 | GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g Affected: 0.1; 0.1; 0.1; 0.1; 1.0; 1.1; +33 more |
| CVE-2024-23903 | 5.3 | Jan 24 | Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are… Affected: through 684.vea_fa_7c1e2fe3 |
| CVE-2026-57285 | 4.3 | Jun 24 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub… Affected: through 1967.1969.v205fd594c821 |
| CVE-2026-42522 | 4.3 | Apr 29 | A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an… Affected: through 1967.vdea_d580c1a_b_a |
| CVE-2024-23902 | 4.3 | Jan 24 | A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL Affected: through 684.vea_fa_7c1e2fe3 |
| CVE-2018-1000185 | 4.3 | Jun 5 | A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/Read access to cause… Affected: through 2.3.4 |
| CVE-2017-1000087 | 4.3 | Oct 5 | GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use Affected: through 2.0.7; 0.1; 0.1; 0.1; 0.1; 1.0; +34 more |
Showing 8